GhostStep Privacy Policy

Effective date: June 9, 2026 · Contact: support@ghoststep.app

Summary

GhostStep is a rhythm-game score tracker and practice companion. It has no ads, no third-party analytics, no tracking, and never sells data. The only data it stores off-device is what makes score sync and player profiles work, and you can delete all of it from inside the app at any time.

What the app stores

• A random device token. Generated on first use. It is not derived from you or your device and is the only key your synced data is stored under.
• Your scores. If you use score sync, your play scores (song, difficulty, score, clear type, play time) are uploaded to our server keyed by that token so they can be restored and shown in your profile.
• Profile names. Your in-game dancer name (shown to other users on your public profile) and, privately, your rival code and network nickname. The private fields are never shown to anyone and exist only so your profile stays yours if you rename. You can make your whole profile private to other users in the app.

What the app never collects

• Your login credentials. When you link your game-network account, you sign in on the network's own website inside a secure in-app browser. Your password is typed only into that website; the app cannot see it and does not store it.
• Microphone audio. If a build includes listening features, microphone audio is processed entirely on the device, in memory, and is never recorded, stored, or transmitted.
• No location, no contacts, no advertising identifiers, no analytics events.

Public player profiles

Profile statistics shown in the app (including those of other players) are derived from publicly visible leaderboard data. If a profile is yours you can claim it via score sync and set it private, which hides its statistics from other users.

Deleting your data

In the app: Settings → Delete my cloud data. This permanently removes your synced scores, profile, and private identity fields from our server. You can also email us at the address above and we will delete it for you.

Retention and sharing

Data is kept until you delete it. It is never sold, rented, or shared with third parties. It is hosted on Cloudflare infrastructure.

Children

The app is not directed at children under 13 and does not knowingly collect personal information from them.

Changes

If this policy changes, the new version will be posted at this URL with an updated effective date.